diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index 4505b4c742f..eb6604ffe34 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -34,7 +34,7 @@ FROM --platform=linux/arm64 quay.io/securesign/trillian-updatetree@sha256:f95dae
 FROM --platform=linux/ppc64le quay.io/securesign/trillian-updatetree@sha256:02247a33df9109b5c4598730d0a61546ab766f3dee9bfa270b99acd331b86a1d as trillian-updatetree-ppc64le
 FROM --platform=linux/s390x quay.io/securesign/trillian-updatetree@sha256:d316d332bb6c106b18ba6f7b1ca4bbda5d0fc376c29b978323c55da75c5650df as trillian-updatetree-s390x
 
-FROM quay.io/securesign/cli-tuftool@sha256:2fbffa294cac96c7b618a23284555adec42dcb4afdaf6d90b6944541a56d9b69 as tuf-tool
+FROM quay.io/securesign/cli-tuftool@sha256:60f68936b86bdc0f1bf8068ebe0677e1e16a60e3c7bc02e1543fcebcfc33024b as tuf-tool
 
 FROM registry.redhat.io/ubi9/httpd-24@sha256:5ea6383a93898a984884300a6186dc95d5eaeeb342e9ee5878961532e670671f
 ENV APP_ROOT=/opt/app-root